db3087cad06eb76d1146f424ccca0ae6_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

db3087cad06eb76d1146f424ccca0ae6_JaffaCakes118
Size

31KB
MD5

db3087cad06eb76d1146f424ccca0ae6
SHA1

a6f882789952d602d8e4027d47b3c002179e6385
SHA256

fb892ddffbbfa330c9621116d885fee9e6d69a2f79cb70469a32061f9b58c480
SHA512

c9b89ac40ab7b05502d20c98dd3457062ef35e63d2d30c1892045a27157af06789b723a54d7f8ad9f419b64be3f8c288616292ad3175c86574a9937084e5b497
SSDEEP

768:pJQ0ZXgsOIJzaKrF1CWOqRtAsjWQnLBf:402IJp1CLEV

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
db3087cad06eb76d1146f424ccca0ae6_JaffaCakes118

Files

db3087cad06eb76d1146f424ccca0ae6_JaffaCakes118
.exe windows:4 windows x64 arch:x64

02549ff92b49cce693542fc9afb10102

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED

Imports

msvcrt

malloc
memset
_get_pgmptr
getenv
sprintf
__argc
__argv
_environ
_XcptFilter
__set_app_type
_controlfp
__getmainargs
exit

kernel32

Sleep
CreateProcessA
SetUnhandledExceptionFilter

Sections

.text
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 24KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 3KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 512B - Virtual size: 144B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ